General
- Target tims external.exe
- Size 3.5MB
- Sample260802-2a2s3sysaz
- SHA256 390f9565d6870bf4113e892631ab3b031a667ae925de977cb4caaae5220f73c3
- MD5 8781d00925eca981b513ea88b78626c5
- SHA1 a27434c9066bcdd72fc2d16b3e0873c3dc959da1
- SHA512 34876f7135f6b52a41d96ab70c63acad44c84c564fc6fff3ff61ae7c9dfb82e3dd38d3ef5dcdcdfe35fd645df376bf8fcf4da683b8ae3fdca20570b9419947eb
- SSDEEP 98304:TFRoy38sw+X/xX8kRw/C3o+SzVdkXJIoTzkmHuVTp8/YDnho:TMM8sw+X5XP2wovPMJIeovy1
- TLSH T1FD06337EB2268792DA9E6372E47CC0A4385D7AB493E031F27351BEC3C6F835465395A0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
tims external.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
tims external.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target tims external.exe
- Size 3.5MB
- SHA256 390f9565d6870bf4113e892631ab3b031a667ae925de977cb4caaae5220f73c3
- MD5 8781d00925eca981b513ea88b78626c5
- SHA1 a27434c9066bcdd72fc2d16b3e0873c3dc959da1
- SHA512 34876f7135f6b52a41d96ab70c63acad44c84c564fc6fff3ff61ae7c9dfb82e3dd38d3ef5dcdcdfe35fd645df376bf8fcf4da683b8ae3fdca20570b9419947eb
- SSDEEP 98304:TFRoy38sw+X/xX8kRw/C3o+SzVdkXJIoTzkmHuVTp8/YDnho:TMM8sw+X5XP2wovPMJIeovy1
- TLSH T1FD06337EB2268792DA9E6372E47CC0A4385D7AB493E031F27351BEC3C6F835465395A0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects SkuldStealer
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.